nerdexam
EC-Council

312-50V10 · Question #351

A botnet can be managed through which of the following?

The correct answer is A. IRC. Botnets are commonly managed via IRC channels, which serve as the command-and-control (C&C) infrastructure for the botnet operator.

Malware Threats

Question

A botnet can be managed through which of the following?

Options

  • AIRC
  • BE-Mail
  • CLinkedin and Facebook
  • DA vulnerable FTP server

How the community answered

(45 responses)
  • A
    91% (41)
  • B
    2% (1)
  • C
    4% (2)
  • D
    2% (1)

Why each option

Botnets are commonly managed via IRC channels, which serve as the command-and-control (C&C) infrastructure for the botnet operator.

AIRCCorrect

IRC (Internet Relay Chat) has historically been the primary C&C mechanism for botnets because it allows a bot herder to join a private channel and broadcast commands to all infected hosts simultaneously. The protocol is lightweight, supports pseudonymous channels, and was widely available, making it ideal for coordinating large numbers of compromised machines. Most classic botnet families such as Agobot and SDBot used IRC-based C&C.

BE-Mail

Email is not used for real-time botnet command issuance because it lacks the low-latency, bidirectional channel structure needed to efficiently control large numbers of bots.

CLinkedin and Facebook

Social media platforms like LinkedIn and Facebook can theoretically be abused for covert C&C but are not a standard or primary botnet management channel.

DA vulnerable FTP server

A vulnerable FTP server is an attack target or a data exfiltration staging point, not a mechanism for issuing real-time commands to botnet members.

Concept tested: Botnet command-and-control channel types

Source: https://www.cisa.gov/sites/default/files/publications/Botnet_Report_1202_2.pdf

Topics

#botnet#IRC#command and control#C2 infrastructure

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice